M2ME Operator Change via UICC and TRE Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current M2M communication technologies face challenges in remotely changing the selected home operator of M2M equipment while ensuring the security of the Machine Communication Identity Module (MCIM), particularly when using either UICC or TRE functional entities, as existing methods either require costly hardware replacement or increase security risks due to lower security of the TRE functional entity.
Innovation Solution
A method and system that combines a TRE functional entity and a UICC to change the selected home operator of M2M equipment by verifying the equipment through a platform validation authority center and providing a new MCIM via a connection established by the old SHO or TRE functional entity, ensuring secure installation and deletion of old operator information, thereby enhancing security and reducing maintenance costs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If the selected home operator is determined when the UICC is issued, then the initial providing of the MCIM is simplified, but the MCIM cannot be remotely changed and requires costly hardware replacement for maintenance
Solution Approach 1:
The patent segments the MCIM functionality into two parts: a stable identifier (IMSI) stored in the UICC and a flexible operator selection mechanism stored in the M2ME. This allows the identifier to remain fixed for initial provisioning simplicity while enabling remote operator changes through database updates without hardware replacement.
Solution Approach 2:
The patent introduces a home operator database as an intermediary between the UICC and the network operators. This database stores the mapping between M2ME identifiers and selected home operators, enabling remote operator changes without modifying the UICC or requiring hardware replacement.
2Ease of repair
If the selected home operator is determined after the UICC is issued, then remote operator changing is enabled, but the initial providing of the MCIM becomes problematic and security risks increase
Solution Approach 1:
The patent extracts the operator selection data (selected home operator identifier) from the UICC and stores it separately in a home operator database. This extraction allows the UICC to remain secure and static while enabling flexible remote operator changes through database updates, eliminating the security risks associated with modifying UICC content.
Solution Approach 2:
The patent creates a copy of the operator identification data in the home operator database that can be remotely updated without affecting the secure UICC. The database maintains a mapping between M2ME identifiers and selected home operators, allowing remote provisioning and changes without compromising UICC security.
3Ease of operation
If the IMSI is changed to switch operators, then operator management becomes convenient, but security risks increase and connection stability may be compromised
Solution Approach 1:
The patent segments the operator identification into two components: a stable IMSI stored in the UICC that never changes, and a flexible selected home operator identifier stored in the database that can be remotely updated. This segmentation allows convenient operator management through database updates while maintaining connection stability and security by keeping the IMSI unchanged.
Solution Approach 2:
The patent performs preliminary actions by establishing the M2ME's right to select home operators and storing the selected operator identifier in the database before any operator changes are needed. This preliminary setup enables fast and secure operator switching without requiring IMSI changes or UICC modifications, maintaining both convenience and security.
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
A method and system for changing a Selected Home Operator (SHO) of a Machine to Machine Equipment (M2ME) are provided, and the method includes: Mode 1: a new SHO receives parameters of the M2ME, after the M2ME has passed the verification by a Platform Verification Authority (PVA), provides a Machine Communication Identity Module (MCIM) of the new SHO to the M2ME by the connection between the M2ME and a Registration Operator (RO) provided by the old SHO; the M2ME installs the new MCIM on a Universal Integrated Circuit Card (UICC); or, Mode 2: the new SHO receives the parameters of the M2ME, after the M2ME has passed the verification by the PVA, provides the MCIM of the new SHO to the M2ME by the connection between the M2ME and the RO established by a Trusted Environment (TRE) functional entity; the M2ME installs the new MCIM on the UICC; the UICC and the TRE functional entity are both on the M2ME. The invention could change the SHO of the M2ME, and ensure the security of the MCIM.